Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure HTTPS in application.yaml #510

Open
iagarcia opened this issue Mar 23, 2023 · 1 comment
Open

Configure HTTPS in application.yaml #510

iagarcia opened this issue Mar 23, 2023 · 1 comment

Comments

@iagarcia
Copy link

iagarcia commented Mar 23, 2023

Hello, I'm trying to use HTTPS but the configuration file application.yaml it seems that it not recognize directive.
I've set this

    ### enable to use the ApacheProxyAddressStrategy which uses X-Forwarded-* headers
    ### to determine the FHIR server address
    use_apache_address_strategy: true
    ### forces the use of the https:// protocol for the returned server address.
    ### alternatively, it may be set using the X-Forwarded-Proto header.
    use_apache_address_strategy_https: true

Other problem is that I can't change FHIR Base http:https://localhost:8080/fhir
in this section

tester:
      home:
        name: Local Tester
        server_address: "https://<MY_DOMAIN>/fhir"
        refuse_to_fetch_third_party_urls: false
        fhir_version: R4

The main error it shown on website

Fetch error
NetworkError when attempting to fetch resource. http:https://<MY_DOMAIN>/fhir/api-docs?page=System Level Operations
Fetch error
Possible mixed-content issue? The page was loaded over https:// but a http:https:// URL was specified. Check that you are not attempting to load mixed content

What am I missing? Regards
Ignacio

@XcrigX
Copy link
Contributor

XcrigX commented Mar 23, 2023

I'm not certain about your entire question, but I am using HTTPS by setting the Spring servlet properties like:

server: 
  port: 8443
  ssl:
    enabled: true
    protocol: TLS
    enabled-protocols: 'TLSv1.2,TLSv1.3'
    key-store-type: PKCS12
    key-store: '/pathto/mycertificate.p12'
    #key-store-password: 

I'm not explicitly setting use_apache_address_strategy, but use server_address to specify the public base URL.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants